Keep headers/logos under 125 pixels high. It takes up valuable viewing space, especially for laptop users, that is best left for the good stuff to appear"above the fold" Take a cue from the big companies, simple logos done well say it all. This is our #1 pet peeve - screaming logos and headers!
Finally, installing the fix wordpress malware plugin Scan plugin alert you that you may have missed, and will check most of this for you. It will also inform you that a user named"admin" exists. That is your user name. You can follow a link and find instructions if you wish. I think that there is a password protection that is good, and there have been no attacks on the sites that I run because I followed those steps.
Hackers don't have the capability to come to a WordPress blog once you got all these lined up for your security. You can have a WordPress account especially that one that provides big bucks from affiliate marketing to you.
Is to delete the default administrator account. This is important because if you don't do it, malicious user know a user name which they could attempt to crack.
BACK UP your site and keep a copy on your computer and storage. If you have a site, back up every day. You spend read this post here a whole lot of money and time on your site, don't skip this! The one solution that does it all is BackupBuddy, no additional plug-ins back up your files, widgets, database and plugins. Need to move your website to another host, this will do it in under a couple of minutes!
Change your password, often, or admin username and your WordPress password and collect and utilize good WordPress security tips to keep original site hackers out!